yangxdong 发表于 2014-5-16 08:57:22

升级20140515_GBK后生成首页出错！

我首页模板里面有SQL语句，具体如下：


在生成首页后提示如下错误：
MySQL Query:SELECT * FROM company c,(selec WHERE status=3 and n.classid=1 and n.username=c.username GROUP BY n.username ORDER BY n.addtime desc LIMIT 0,10
MySQL Error:You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'WHERE status=3 and n.classid=1 and n.username=c.username GROUP BY n.username ORD' at line 1 MySQL Errno:0
在模板编辑预览的时候是正常的，生成HTML就报错，模板里面的"select *"被替换成“selec”，是不是/include/global.func.php里面的strip_sql函数问题：
function strip_sql($string) {
      $search = array("/union/i","/where/i","/0x({2,})/i","/select([[:space:]\*\/\-\(])/i","/update([[:space:]\*\/\-\(])/i","/replace([[:space:]\*\/\-\(])/i","/delete([[:space:]\*\/\-\(])/i","/drop([[:space:]\*\/\-\(])/i","/outfile([[:space:]\*\/\-\(])/i","/dumpfile([[:space:]\*\/\-\(])/i","/load_file[[:space:]]*\(/i","/substring[[:space:]]*\(/i","/substr[[:space:]]*\(/i","/left[[:space:]]*\(/i","/concat[[:space:]]*\(/i","/concat_ws[[:space:]]*\(/i","/ascii[[:space:]]*\(/i","/hex[[:space:]]*\(/i","/ord[[:space:]]*\(/i","/char[[:space:]]*\(/i");
      $replace = array('union','where','0x\\1','selectt\\1','update\\1','replace\\1','delete\\1','drop\\1','outfile\\1','dumpfile\\1','load_file(','substring(','substr(','left(','concat(','concat_ws(','ascii(','hex(','ord(','char(');
      return is_array($string) ? array_map('strip_sql', $string) : preg_replace($search, $replace, $string);
}

foxcvs 发表于 2014-5-16 10:05:53


函数过滤了哈
http://bbs.destoon.com/static/image/smiley/default/lol.gif

yangxdong 发表于 2014-5-16 10:37:18



foxcvs 发表于 2014-5-16 10:05

函数过滤了哈
会改吗？哪的问题？

yangxdong 发表于 2014-5-16 10:05:00


http://bbs.destoon.com/static/image/smiley/default/cry.gif
http://bbs.destoon.com/static/image/smiley/default/cry.gif
http://bbs.destoon.com/static/image/smiley/default/cry.gif
http://bbs.destoon.com/static/image/smiley/default/cry.gif

9129289 发表于 2014-5-16 11:24:57


发表文章无法生成完蛋了
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif
http://bbs.destoon.com/static/image/smiley/default/mad.gif

yangxdong 发表于 2014-5-16 11:49:35


又更新了，我这个问题怎么还没解决呢？？？？
http://bbs.destoon.com/static/image/smiley/default/huffy.gif

龙在天涯 发表于 2014-6-4 09:06:06


你的模板中有问题，应该是首页模板中哪个标签有错误。

heaven 发表于 2014-11-7 09:15:32


9129289 发表于 2014-5-16 11:49

发表文章无法生成完蛋了
无法生成提示什么？

tian0220 发表于 2015-5-14 14:32:36


用默认的模版覆盖一下就不会有问题了{:soso_e100:}
页: [1]
查看完整版本: 升级20140515_GBK后生成首页出错！